When a remote access terminal connected to a first Intranet receives provision of services from a second Intranet, a web server of the first Intranet loads a remote service execution environment to the remote access terminal. The second Intranet dynamically installs a service proxy on the second dynamic proxy server. Next, the second Intranet supplies a remote service interface to the remote access terminal via a first dynamic proxy server and second dynamic proxy server. The service proxy receives provision of services from the second Intranet instead of the remote service interface. The network of the present invention dynamically install service proxies on a dynamic proxy server when multiple Intranets are connected, and therefore, firewall tunneling by service unit is possible.
Legal claims defining the scope of protection, as filed with the USPTO.
1. A network system using a firewall dynamic control method, comprising: a first Intranet and a second Intranet connected to each other with the internet as a base; a first dynamic proxy server for forming a firewall to protect said first Intranet; a second dynamic proxy server for forming a firewall to protect said second Intranet; a remote access terminal connected to said first Intranet: a first object directory server provided within said first Intranet for judging whether a service requested by said remote access terminal is provided in said first Intranet or is provided in said second Intranet; and a second object directory server provided within said second Intranet to dynamically install a service proxy in said second dynamic proxy server when said service is provided in said second Intranet; wherein said first object directory server comprises a first local site reference section that stores services provided in said first Intranet and a remote site reference section that makes requests for searches of services provided in said second Intranet to said second dynamic proxy server.
2. The network system using a firewall dynamic control method according to claim 1 , wherein said first Intranet comprises a first authentication server that judges whether access from said remote access terminal is approved or not, and when access is approved, issues a connection permission certification.
3. The network system using a firewall dynamic control method according to claim 2 , wherein said second Intranet comprises a second authentication server that uses said connection permission certification to judge whether or not to permit use of services by said remote access terminal.
4. The network system using a firewall dynamic control method according to claim 1 , wherein said first Intranet comprises a web server for providing a remote service execution environment to said remote access terminal.
5. The network system using a firewall dynamic control method according to claim 1 , wherein said second object directory server comprises a second local site reference section that judges services provided in said second Intranet according to requests from said second dynamic proxy server.
6. The network system using a firewall dynamic control method according to claim 1 , characterized in that said first Intranet and second Intranet are connected via a Virtual Private Network.
7. The network system using a firewall dynamic control method according to claim 1 , characterized in that communication between said remote access terminal and said service proxy is performed according to Remote Object Protocol.
8. The network system using a firewall dynamic control method according to claim 1 , characterized in that communication between said service proxy and said second Intranet is performed according to Remote Object Protocol.
9. A network system using a firewall dynamic control method, comprising: a first Intranet and a second Intranet connected to each other with the internet as a base; a first dynamic proxy server for forming a firewall to protect said first Intranet; a second dynamic proxy server for forming a firewall to protect said second Intranet; a remote access terminal connected to said first Intranet: a first object directory server provided within said first Intranet for judging whether a service requested by said remote access terminal is provided in said first Intranet or is provided in said second Intranet; and a second object directory server provided within said second Intranet to dynamically install a service proxy in said second dynamic proxy server when said service is provided in said second Intranet; wherein said second object directory server comprises a means for sending remote service interfaces for accessing said service proxies from a remote site to said second dynamic proxy server.
10. The network system using a firewall dynamic control method according to claim 9 , wherein said second dynamic proxy server comprises a means of providing said remote service interfaces to said remote access terminal according to requests from said remote access terminal.
11. The network system using a firewall dynamic control method according to claim 10 , characterized in that said service proxy receives provision of said services from said second Intranet according to requests from said remote service interface executed by said remote access terminal.
12. The network system using a firewall dynamic control method according to claim 11 , characterized in that said remote access terminal receives provision of said services from said service proxy by executing said remote service interface.
13. The network system using a firewall dynamic control method according to claim 9 , wherein said first Intranet comprises a first authentication server that judges whether access from said remote access terminal is approved or not, and when access is approved, issues a connection permission certification.
14. The network system using a firewall dynamic control method according to claim 13 , wherein said second Intranet comprises a second authentication server that uses said connection permission certification to judge whether or not to permit use of services by said remote access terminal.
15. The network system using a firewall dynamic control method according to claim 9 , wherein said first Intranet comprises a web server for providing a remote service execution environment to said remote access terminal.
16. The network system using a firewall dynamic control method according to claim 9 , characterized in that said first Intranet and second Intranet are connected via a Virtual Private Network.
17. The network system using a firewall dynamic control method according to claim 9 , characterized in that communication between said remote access terminal and said service proxy is performed according to Remote Object Protocol.
18. The network system using a firewall dynamic control method according to claim 9 , characterized in that communication between said service proxy and said second Intranet is performed according to Remote Object Protocol.
19. A network system using a firewall dynamic control method, comprising: a first Intranet and a second Intranet connected to each other with the internet as a base; a first dynamic proxy server for forming a firewall to protect said first Intranet; a second dynamic proxy server for forming a firewall to protect said second Intranet; a remote access terminal connected to said first Intranet: a first object directory server provided within said first Intranet for judging whether a service requested by said remote access terminal is provided in said first Intranet or is provided in said second Intranet; and a second object directory server provided within said second Intranet to dynamically install a service proxy in said second dynamic proxy server when said service is provided in said second Intranet; wherein a call back proxy for performing call back to said remote access terminal from said second Intranet is dynamically installed in said first dynamic proxy server by said second Intranet, and wherein said second dynamic proxy server comprises a means for simultaneously sending a remote service interface for accessing said service proxy from remote sites and said call back proxy to said first dynamic proxy server.
20. The network system using a firewall dynamic control method according to claim 19 , wherein said first Intranet comprises a first authentication server that judges whether access from said remote access terminal is approved or not, and when access is approved, issues a connection permission certification.
21. The network system using a firewall dynamic control method according to claim 20 , wherein said second Intranet comprises a second authentication server that uses said connection permission certification to judge whether or not to permit use of services by said remote access terminal.
22. The network system using a firewall dynamic control method according to claim 19 , wherein said first Intranet comprises a web server for providing a remote service execution environment to said remote access terminal.
23. The network system using a firewall dynamic control method according to claim 19 , characterized in that said first Intranet and second Intranet are connected via a Virtual Private Network.
24. The network system using a firewall dynamic control method according to claim 19 , characterized in that communication between said remote access terminal and said service proxy is performed according to Remote Object Protocol.
25. The network system using a firewall dynamic control method according to claim 19 , characterized in that communication between said service proxy and said second Intranet is performed according to Remote Object Protocol.
Cooperative Patent Classification codes for this invention. Click any code to explore related patents in that topic.
March 30, 1999
November 4, 2003
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.